Packages / Debian 12 (Bookworm) / libdevel / libpython3.11-testsuite

[Source: python3.11]

Package: libpython3.11-testsuite (3.11.2-6+deb12u8)

Testsuite for the Python standard library (v3.11)

Other Packages Related to libpython3.11-testsuite:

  • dep: [python3.11] (>= 3.11.2-6+deb12u8)

    Interactive high-level object-oriented language (version 3.11)

  • dep: [net-tools]

    NET-3 networking toolkit

  • sug: [python3-gdbm]

    GNU dbm database support for Python 3.x

  • sug: [python3-tk]

    Tkinter - Writing Tk applications with Python 3.x

Download libpython3.11-testsuite

ArchitecturePackage sizeInstalled sizeFilesPackage
all3.2 MiB24 MiBlist of filesDownload

Paketdateipfade (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 12 (Bookworm) im Browser testenImage mit libpython3.11-testsuite bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.11.2-6+deb12u8bookworm / mainallDebian 12 · main · amd643.2 MiB24 MiBpool/main/p/python3.11/libpython3.11-testsuite_3.11.2-6+deb12u8_all.deb
3.11.2-6+deb12u8bookworm / mainallDebian 12 · main · arm643.2 MiB24 MiBpool/main/p/python3.11/libpython3.11-testsuite_3.11.2-6+deb12u8_all.deb

Field source: Debian 12 (Bookworm) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-114583]

jython: CVE-2026-114583

Medium(6.9)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    dsa · python3.11 · debian · bookworm; dsa · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    dsa · python3.11 · debian · bookworm; dsa · python3.11 · debian · 12

[CVE-2026-19553]

ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname arg

High(7.6)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-19445]

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certif

Critical(9.2)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-12345]

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of

Medium(6.3)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm

[CVE-2026-15310]

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.

Medium(6.5)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-15806]

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matchi

Medium(6)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-17084]

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior w

Medium(6.5)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-18503]

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().

Low(3.3)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm

[CVE-2026-6879]

`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-ta

Low(3.7)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-15308]

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

High(8.7)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-11972]

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

High(8.2)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-0864]

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and v

High(7.5)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-11940]

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.  The extraction f

High(7.8)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-12003]

To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modu

High(7.8)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-9669]

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompress

High(8.2)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-3276]

unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This

High(7.5)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-8328]

The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeer

Medium(5.9)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-7210]

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this

High(7.5)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-6019]

http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the gene

High(8.7)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen · Behoben: 3.11.2-6+deb12u9

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[CVE-2026-3446]

When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can

Medium(6)Betroffen
Details (2)

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

  • 3.11.2-6+deb12u8 · all · bookworm

    Betroffen

    nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.11.2-6+deb12u8 / allBeobachtet Sep 1, 2026sha256 718afaa9807b…64633fa3Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 718afaa9807bcc228d16f7e01436f7fdbfc1268f806091c0b83d57f564633fa3

Download prüfen

printf '%s %s\n' '718afaa9807bcc228d16f7e01436f7fdbfc1268f806091c0b83d57f564633fa3' 'libpython3.11-testsuite_3.11.2-6+deb12u8_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

3.11.2-6+deb12u8 / allBeobachtet Sep 1, 2026sha256 718afaa9807b…64633fa3Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 718afaa9807bcc228d16f7e01436f7fdbfc1268f806091c0b83d57f564633fa3

Download prüfen

printf '%s %s\n' '718afaa9807bcc228d16f7e01436f7fdbfc1268f806091c0b83d57f564633fa3' 'libpython3.11-testsuite_3.11.2-6+deb12u8_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Quellen

  • Debian 12 (Bookworm) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Debian 12 (Bookworm) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Debian 12 (Bookworm) security main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Debian 12 (Bookworm) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified